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(57) Abstract: A method, system, or computer program product is presented for cross-domain, single-sign-on, authentication func- 
— ^ tionality. The methodology uses an introductory authentication token to introduce an already authenticated user from one domain to 
a new domain. This token is passed from one domain to the other domain using HTTP-redirection. This token is protected by en- 
cryption with a cryptographic key shared only between the two domain in a secure manner such that an external user cannot generate 
a counterfeit introductory token. An introductory token is further protected by enabling it with a limited lifetime so that an unautho- 
rized user would not be able to use or reuse the introductory token within the token s lifetime. After a user has been introduced to a 
)^ new security domain, then all of the user' s resource requests are authorized by the new domain. 
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